Version History

Users can now enrich Motion Imagery streams with VMTI data generated by the Shield AI Tracker v4 algorithm using the Land, Maritime, and SAR tracking algorithms within the Kraken Real-Time processor framework.

• Installing Processor Modules

• Configuring Processors

Expand support for generating additional KLV metadata items from Kraken Processor Modules using MISB ST0903 VMTI encoded data items carried within MISB ST0601 metadata packets.

• Processor Settings 

Improved usability of the Kraken product through visual workflow enhancements.

• N/A

Kraken now includes preliminary support for a mobile friendly user interface for real-time status and configuration.

• Getting Started with the Web Interface

• Exploring the Web Interface

STIG guidelines are now enforced on fresh installs and updates of Kraken to improve security. 

• N/A

The SRT library has been upgraded to version 1.5.4. 

• Orthrus Software Credits

Kraken now supports Blackmagic DesktopVideo driver updates for version 14.2.1

• Third-party Software Credits

Kraken now includes the NVIDIA 560.35.03 driver to support more modern NVIDIA hardware devices.

• Third-party Software Credits

A new Help Center experience is available across Haivision products

• Help Center

Upon upgrading, users will now have access to a summary of the new features on their Kraken device.

• Reviewing What's New

Kraken now allows selection and insertion of all MISB ST0102.12 security metadata items into streams. This update aids the passage of Motion Imagery through Cross Domain Solutions.

• Configuring KLV Metadata Insertion

• Metadata Settings

Kraken's configuration for selecting outputs on streams has been improved for better stream management.

• Stream Parameters

Informative icons for protocols used on Kraken Inputs and Outputs are now shown.

• Stream Parameters

Updated network configuration to leverage the modern Network Manger CLI.

• N/A

A number of improvements have been made to the user interface, including refined pop-up notifications, descriptive badges for inputs and outputs, and dashboard upgrades.

• Navigating the Dashboard

• Stream Parameters

The dashboard can now display up to 16 Kraken stream previews.

• N/A

This version includes an enhanced user interface to provide a more streamlined and intuitive experience. The Argon design includes preview thumbnails of running streams and real time streaming statistics for confidence monitoring

• Exploring the Web Interface

Kraken's base operating system has been updated to Oracle Linux 9.

• N/A

Kraken users can now enable or disable the gathering of anonymous user analytic data originating from the client device. This user analytic data helps to direct future Kraken features and enhancements.

• Signing in to the Web Interface

The Cryptography Library in Kraken has been updated to OpenSSL 3.0.

• N/A

In version 4.0, Bypass, Transcoder, and Transcoder + Passthru stream modes all leverage the same Kraken Output module, providing unified streaming experience for Kraken Outputs for HLS, RTSP, and RTMP formats

• Input Settings

• Output Settings

In version 4.0, HLS PULL outputs are available in all stream routing modes (Bypass, Transcoder, and Transcoder + Passthru).  Preview these HLS outputs in the web with the Kraken preview player.

• Output Settings

In version 4.0, Kraken ceases using the Haivision router service, hvrouted, as a back-end service.  Routing behavior is maintained through use of a unified Kraken Output module.

• N/A

In version 4.0, the REST api provides a new endpoint enumerating the operational streaming status of configured Kraken Streams.

• Streams List View

In version 4.0, transcoding between HEVC and H.264 (and vice-versa) now preserves the SMPTE 12M timestamp information.

• N/A

In version 4.0, Kraken adds support for TLSv1.3, and depreciates selection and use of less-secure TLSv1.0 and TLSv1.1 methods.

• N/A

In version 4.0, certificates show an alert when within 30 days of expiration to account for best industry practices for shorter certificate viability.

• Managing Certificates

Kraken 4.0 supports VMware ESXi 7.0 hosts and later.

• Kraken OVA Deployment Guide

In version 4.0, Kraken uses an updated partitioning scheme following security best practices.

• N/A

Kraken has enhanced support for video-only RTSP outputs to downstream systems (e.g. Milestone and Genetec). 

• Transcoder Parameters for RTSP

• Configuring RTSP Outputs 

Documentation has been updated with detailed instructions on proper port usage for RTSP outputs.

• RTSP Server Service

Retry source connections when lost for RTSP, MJPEG, and similar source types that rely on TCP-based connections.

• N/A

3.10.1 features an improved network interface affinity for Kraken Inputs and Kraken Outputs, including multicast.

• N/A

3.10.1 has addressed an issue where Synchronous KLV was corrupted through Bypass and Transcode streams.

• N/A

Kraken Outputs now supports RTSP streaming for PUSH (send to client) and PULL (Kraken as an RTSP server) modes for compatibility with Video Management Systems (VMS) such as Milestone and Genetec.

• RTSP Server Service

• Configuring RTSP Outputs

Kraken now supports both IPV4 and IPV6 networking and streaming services.

• IPv4 and IPv6 Support

• Configuring Network Settings

Kraken now supports MJPEG video inputs over HTTP and HTTPS for low-latency streaming of camera or AI workflows.

• Configuring Inputs

• Input Settings

Kraken now supports discovery and use of NDI sources on a local network for encoding.

• Configuring Input Parameters

• Input Settings

HTTP Live Streaming (HLS) is a supported output format for bypass streams in MPEG2TS format and is compatible with h.264 encoded streams. An HLS preview player is included within Kraken for admin troubleshooting.

• Configuring Output Parameters

• HLS Live Preview

• Output Settings

wolfSSL allows Kraken appliances to support FIPS cryptographic requirements. The use of wolfSSL is available in version 3.8, but is disabled by default. To manually enable the wolfEngine within Kraken, please contact your Haivision account representative, or our technical support team at tickets@haivision.com.

• N/A

Corrective action to resolve identified security issues affecting certification. Including:

• Account Lifecycle — Core features include:

  • Locking accounts upon multiple failed login attempts

  • Disabling accounts after login inactivity

  • Allowing Administrators to disable accounts from Active or Locked account states, as well as enable accounts from Locked or Disabled account states

  • Prompting users to change password when nearing expiration

  • Allowing administrative adjustment of account settings via configuration file

  • Logging account events including creation, modification, disabling, enabling, and removal

• User Sessions — Core features include:

  • Enforcing security flags on cookies

  • Limiting the number of concurrent login sessions

  • Enforcing logout upon idle timeout

  • Clearing client session data upon logout

  • Allowing administrative adjustment of session settings via configuration file

  • Logging user session events

• Password Lifecycle — Core features include:

  • Enforcing password complexity for length and character types

  • Enforcing a minimum number of character changes between successive passwords

  • Preventing reuse of old passwords over a configurable period

  • Enforcing a minimum and maximum password lifespan

  • Allowing administrative adjustment of password settings via configuration file

  • Logging password creation and modification events

Tip

For details on administrative adjustment of account, session, and password settings via configuration file, please contact your Haivision representative.

• Password Requirements

Kraken now has Reverse-Path filtering (a Linux Kernel feature, defined in RFC 3704, designed to ensure that packets that are not routable are dropped). Reverse path filtering drops packets with source addresses that should not have been able to be received on the interface they were received on. Two options are available: Strict or Loose.

• Managing Security Policies

Kraken has multiple physical interfaces that are intended to provide redundancy and bandwidth, not network segregation. Because of this, the system will listen on all available physical interfaces regardless of IP address and respond to web requests. This new feature allows configuration of the web server to listen on a specified IP address and port.

• Enabling and Disabling Services

Kraken Bypass Streams can now be licensed and counted separately from Kraken Transcode Streams. This follows introduction of stream-based licensing in Kraken 3.6 which adjusted how the Kraken runtime stream capacity related to license limits for any stream type (Bypass or Transcode).

• Status Settings

The legacy v1.0 REST API is now deprecated.

• Kraken API v2.0 Integrator's Guide

Kraken 3.7 has retired usage of Apache and 32-bit libraries in favor of NodeJS-based microservices.

• N/A

Kraken 3.7 addresses known vulnerabilities discovered through security scans during development.

• N/A

Kraken 3.6.1 provides controls to adjust the Program clock Reference (PCR) in outgoing Kraken Transport Streams.

• Transcoder Settings

Audio codec choice is no longer restrained by video codec selection. MPEG1 Layer II may now be selected for all video codecs.

• Transcoder Settings

Kraken 3.6.1 enforces password length and complexity requirements when changing user passwords

• Password Requirements

Kraken 3.6.1 logs Local User login, logout, and timeout events.

• N/A

Kraken 3.6.1 addresses known package vulnerabilities with applicable updates.

• N/A

Kraken v3.6 supports more granular licensing based on stream capacity for Kraken virtual instances on AWS, Azure, and other customer hardware. This enables flexibility for the Kraken Small Form Factor hardware, Virtual Machines, and Cloud offerings to match desired stream throughput

• N/A

Kraken v3.6 enables support for the latest series of NVIDIA devices (for example, updated Cuda version to 11.2 and Nvidia drivers version to 460.32).

• N/A

A BYOL Kraken offering is now available for the AWS and AWS GovCloud marketplaces.

• Kraken AWS Quick Start Guide

Administrators can now control the running state of certain Kraken services.

• Enabling and Disabling Services

The Web Interface now provides options to specify which TLS versions are accepted from the HTTPS client.

• Managing Security Policies

Kraken can now be paired with a Haivision EMS (Element Management System) to discover, manage and monitor all of your Haivision devices from one place.

• N/A

Kraken now supports and encodes video from NDI sources.

• Configuring Input Parameters

Kraken now supports ingest of GigE Vision input over Ethernet for routing into the supported encoders within the transcoding pipeline. GigE Vision streams can be encoded using H.264/H.265 transport streams and distributed as output from Kraken as transport streams over UDP or SRT. GigE Vision encoding and output is supported across any device that conforms to the GigE Vision 2.1 standard.

• Configuring Input Parameters

The Kraken Web Interface now displays a warning indication in the title bar when changes to Streams, Inputs, Transcoders, Outputs, or Metadata have been applied but not saved to a preset. The indication is displayed when a user signs out or in to Kraken.

• Saving and Loading Presets

This new Haivision appliance offers a small form factor transcoder where ruggedization is not required.

Note

QSV encoding is not supported on Kraken Edge in v3.4; however, QSV is supported in the 3.4.1 maintenance release. Please contact your Haivision Account Manager to obtain the 3.4.1 update

• Kraken Edge Quick Start Guide

The Kraken Web Interface can now display corporate branding. This "white labeling" allows customers to import their corporate logo for display in the following areas: banner graphic, Sign-in page graphics, browser favicon and title, as well as to switch between dark or light color scheme.

• Re-Branding the User Interface

The Kraken Web Interface now provides SRT statistics and graphs, and allows selection of the network interface for SRT inputs and outputs. New SRT statistics and graphs provide a diagnostic tool for troubleshooting network packet loss issues, and help users to make informed decisions on configuring SRT latency and bandwidth overhead.

• Viewing Kraken Statistics

Kraken may now be used to capture and encode SDI input using an SFP (Small Form-factor Pluggable) SDI-to-IP gateway adapter. Phase 2 of this feature provides support for multiple SDI inputs, interlaced video, audio and ancillary data (KLV, CC).

• N/A

Kraken 3.3 supports RTMP input and output in Bypass mode for transmuxing and stream routing with RTMP.

• N/A

Kraken is now available in the Azure marketplace. Streams from a variety of sources may be sent to the cloud-based Kraken for transcoding and routing to other locations.

• N/A

Kraken may now be used to capture and encode SDI input using an SFP (Small Form-factor Pluggable) SDI to IP gateway device. The initial implementation supports Embrionix SDI-SFP devices that support SMPTE 2100 IP encapsulation.

• Kraken OVA Deployment Guide

Kraken now provides certificate management from the Web Interface. Administrators can now use the Web Interface to generate self-signed certificates and certificate signing requests (CSRs), as well as importing certificates or private keys.

• Managing Certificates

Kraken 3.2 provides an improved user experience for software upgrades. This includes a more accurate progress indicator, additional status feedback in the Web Interface, and efficiency improvements.

• N/A

The transport protocol can now be set for RTSP inputs. Users can select from UDP, TCP, UDP Multicast and HTTP.

• Configuring Inputs

Ability to bypass the transcoder for transmuxing and stream routing for live streams.

Note

If you have an existing stream, you need to delete the stream and create a new one in Bypass mode (i.e., you can't switch an existing stream).

• N/A

Tags 106 - 141 added to the full 0601 UAS KLV Tag Filtering set on the Transcoders page.

• N/A

Users can now shut down Kraken from the Administration>Status page.

• N/A

Newly added virtual network interfaces are displayed on the Network page after rebooting.

• N/A

Ability to add, edit and remove user accounts within each user role: Administrator, Operator and Viewer

• Role-based Authorization

Public offering of REST API v2.0 and JSON Web format. API v2.0 provides all functionality from the Kraken Web GUI and is also harmonized with other Haivision appliances. Note that REST API v1.0 is still available and unchanged with this release.

• N/A

(On qualified hardware) Offloads encode processing from the Kraken transcode pipeline to NVIDIA GPUs. Assumes Kraken is running as a VM in an ESXi 6.5+ environment.

• Configuring Transcoder Parameters

• Kraken OVA Deployment Guide

Architecture Transition to CentOS 7 64-bit.

• N/A

Filter out undesired or unused MISB 0601 UAS KLV metadata tags to reduce the outbound metadata bitrate. This allows more bandwidth to be allocated to video on limited capacity network links

• Filtering UAS KLV Metadata Tags

Configure the transcoder to frame-decimate KLV (Key Length Value) metadata. This can reduce the rate at which metadata is transmitted from Kraken to allow better control of the outbound metadata bitrate.

• Configuring Transcoder Parameters

A new feedback component features stream event reporting within the Web Interface with the option to download the stream event log. This feature is intended to aid in diagnostics and debugging sessions.

• Monitoring Stream Health

A continual commitment to security. Updates to the kernel and other related mitigations to ever-evolving vulnerabilities.

Integration of the latest SRT 1.3.1 libraries. Expanded configurability of SRT to include MTU, and TTL. SRT Passphrases is now protected in logs and Kraken configuration files.

• N/A

Enhanced debugging logs per transcode session. Alpha version of v2 API available upon request to Haivision Technical Support.

• N/A

Added MPEG4 (Part 2) Encoding capability. Improved and enhanced the interoperability with RTSP camera sources. Updated underlying QSV libraries.

• N/A

Continual commitment to security. Updates to the kernel and other related mitigations to ever-evolving vulnerabilities.

• N/A